I am on Windows 10, I didn't touch the firewall (I didn't have to) I finally made it works, I found an old issue on Github about a bad creation of the new listeners in
domain.xml, after a lot of manual modifications (at some point no listener were even working), at last, I created the listener from
Network Listener instead of
Http Listener, which essentially seems the same but finally worked, the bug seems to be in the tag virtual-server, the new httpslistener wasn't added
<http-service>
<access-log></access-log>
<virtual-server network-listeners="http-listener-1,http-listener-2,https-letsencrypt" id="server"></virtual-server>
<virtual-server network-listeners="admin-listener" id="__asadmin"></virtual-server>
</http-service>